CVE-2014-2689

MEDIUM · 4.3 CVSS Gepubliceerd: 08-05-2014 CWE-79

Beschrijving NL

Cross-site scripting (XSS) -kwetsbaarheid in Offiria 2.1.0 en eerder stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de PATH_INFO naar installer/index.php.

Origineel (Engels) tonen

Cross-site scripting (XSS) vulnerability in Offiria 2.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to installer/index.php.

Affected products

Offria

References

www.securityfocus.com
www.securityfocus.com
www.htbridge.com